TI-2008-01933 CVE-2008-2011 · GHSA-cwm6-w585-hc2qCross-site scripting (XSS) vulnerability in the National Rail Enquiries Live Departure…Priority LOW 23Cross-site scripting (XSS) vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows remote National Rail Enquiries servers or man-in-the-middle attackers to inject arbitrary web script…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01407 · Published 2008-04-29 · No fix listed CWE-79
